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REMARKS 

Favorable reconsideration of this application as presently amended and in view of the 
following discussion is respectfully requested. 

Claims 1-11 are pending in the present application. Claims 1-9 are amended and 
Claims 10 and 1 1 are added by the present amendment. 

Amendments to Claims 1 and 9 are supported by the originally filed specification at 
least at page 21, lines 9-13, and page 23, line 23, to page 24, line 8. Amendments to Claim 4 
are supported by the originally filed specification at least in Figure 3. Claims 1-9 are also 
amended to correct minor informalities. Thus, it is believed no new matter is added. 

In the outstanding Office Action, a substitute specification was required; Claims 2-5 
and 9 were rejected under 35 U.S.C. §112, second paragraph; Claims 1, 2, 4, 5, and 9 were 
rejected under 35 U.S.C. § 102(e) as anticipated by U.S. Patent 6,473,396 to Kumar ; Claims 
4 and 5 were rejected under 35 U.S.C. § 102(b) as anticipated by U.S. Patent No. 5,975,738 
to DeKoning et al. (herein " DeKoning "); Claim 7 was indicated as allowable if rewritten in 
independent form; and Claim 6 was allowed. 

Applicant gratefully acknowledges the Examiner's indication of allowable subject 
matter. Accordingly, new Claim 10 is added and includes the limitations of originally filed 
Claim 1 and Claim 7, which was indicated as allowable if rewritten in independent form. 
Further, new Claim 1 1 is added and includes the limitations of originally filed Claims 4 and 
7. Thus, new Claims 10 and 1 1 are believed to be allowable. 

Further, applicant and applicant's representatives thank Examiner Chu for the 
courtesy of a personal interview with applicant's representatives on April 20, 2004. During 
the interview, the rejections noted in the outstanding Office Action were discussed, and the 
Examiner agreed to reconsider the claims based on the arguments presented. Arguments and 
claim amendments presented during the interview are reiterated below. In addition, new 
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arguments are presented below to further distinguish the claimed invention over the cited 
references. In addition, during the interview, the Examiner indicated that Claim 3 should be 
considered only to have been rejected under 35 U.S.C. § 1 12, second paragraph, and Claim 8 
should be considered allowable if rewritten in independent form. 

In light of the request for a substitute specification noted in the outstanding Office 
Action, a substitute specification is provided. The substitute specification corrects minor 
informalities and does not include new matter. 

Regarding the rejection of Claims 2-5 and 9 under 35 U.S.C. § 1 12, second paragraph, 
Claims 2-5 and 9 are amended to more clearly recite the relationships between each of the 
main control units and the communication control units, as noted in the outstanding Office 
Action. In addition, Claims 1 and 6-8 are amended for consistency with the amendments 
made to Claims 2-5 and 9. Accordingly, it is respectfully requested that rejection be 
withdrawn. 

Claims 1, 2, and 9 were rejected under 35 U.S.C. § 102(e) as anticipated by Kumar . 
Applicant respectfully traverses that rejection. 

Amended Claim 1 is directed to a field apparatus control system for controlling a field 
apparatus connected to a field bus. The field apparatus control system includes, inter alia, 
first and second main control units configured to control the field apparatus and first and 
second communication control units configured to process information communication 
between the first and second main control units, respectively, and the field apparatus via the 
field bus. The first and second communication control units have a same address on a 
network via the field bus, and information outputted to the same address from the field 
apparatus via the field bus is received by both the first and second communication control 
units. Amended Claim 9 recites similar features directed to a storage medium. 
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This arrangement advantageously results in a more reliable field apparatus control 
system because a field apparatus control main system has a single same address that does not 
change when a standby system replaces a normal system, thus simplifying the process of 
switching from a first to a second communication control unit upon a failure condition. 
Further, because information outputted to the same address is received by both the first and 
second communication control units, both communication control units have the same status 
information regarding the field apparatuses, thereby further simplifying and accelerating the 
process of switching from a first communication control unit to a second communication 
control unit upon a failure condition. 1 

Applicant respectfully submits that Kumar does not teach or suggest that first and 
second communication control units share a same address and that information outputted to 
the same address from the field apparatus is received by both the first and second 
communication control units. Kumar describes a system including active server 101 and 
standby server 102 (e.g., first and second communication control units) that have a different 
physical address and a same logical address. 2 Kumar 's system also includes client modules 
121 and 122 (e.g., field apparatuses), and the client modules send packets 200 that are 
addressed to one of the servers using a destination address field 204 including a single logical 
or physical bit 205 that indicates if the address is a logical address or a physical address. 3 

Further, according to Kumar , a "server module made active is configured to receive 
packets with destination addresses that are both physical and logical, whereas server modules 
on standby is [sic] configured to receive packets with physical addresses.'* 4 Thus, standby 
server modules do not receive packets with logical addresses, but only receive packets with 
physical addresses. In other words, Kumar indicates that a packet with a given logical 

1 Specification at page 5, lines 5-11; page 21, lines 9-13; and page 23, line 23, to page 24, line 8. 

2 Kumar at column 4, lines 25, and column 7, lines 13-17. 

3 Kumar Figures 1 and 2. 

4 Kumar at column 6, lines 33-37. 
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address is received only by an active server, because the standby servers only receive packets 
with a physical address. Hence, Kumar describes a system in which two servers cannot 
receive a same particular packet addressed to the server from a client module, because if the 
packet address is physical, the packet address is unique to a given server, and if the packet 
address is logical, the packet is received only by the single active server. 

As discussed during the interview, Kumar also describes an embodiment in which the 
active server can route packets to a standby server. 5 However, in this case the packet sent 
from the active server to the standby server is addressed to the standby server using a 
physical address of the standby server. 6 Thus, even though the packet ends up at the standby 
server, it is not outputted to an address of the standby server that is the same as the address of 
the active server, which in the case of Kumar is only the logical address. Rather, in this 
embodiment, the packet is outputted to a physical address of the standby server, which is 
different than the physical address of the active server. Hence, Kumar does not teach or 
suggest "information outputted to the same address from the field apparatus via the field bus 
is received by both the first and second communication control units," as in Claim 1 and as 
similarly recited in Claim 9. 

Accordingly, it is respectfully submitted that independent Claims 1 and 9, and claims 
depending therefrom, are allowable. 

Claims 4 and 5 were rejected under 35 U.S.C. § 102(e) as anticipated by Kumar and 
by DeKoning . Applicant respectfully traverses those rejections. 

Amended Claim 4 is directed to a field apparatus control system for controlling 
normal and standby field apparatuses. The system includes, inter alia, normal and standby 
field buses that are connected to the normal and standby field apparatuses, respectively. In 



Kumar at column 4, lines 61-64. 
6 Kumar at column 4, lines 40-44. 
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addition, the normal field bus is isolated from the standby field apparatus and the standby 
field bus is isolated from the normal field apparatus. 

This arrangement advantageously results in greater fault tolerance and fault isolation 
between the normal and standby field bus and the normal and standby field apparatus. 
Because the normal field bus is isolated from the standby field apparatus, and the standby 
field bus is isolated from the normal field apparatus, failures in the normal field apparatus 
will not adversely impact devices connected to the standby field bus, and likewise, failures in 
the standby field apparatus will not adversely impact devices connected to the normal field 
bus. 7 

Applicant respectfully notes that neither Kumar nor DeKoning teach or suggest 
normal and standby field buses isolated from standby and normal field apparatuses, 
respectively. First, Kumar discloses active and standby servers connected to clients on a 
single bus 110, but does not disclose active and standby buses or active and standby clients. 
Further, applicant respectfully traverses the statements in the outstanding Office Action that 
Kumar describes active and standby clients in the section starting at column 5, line 12, 
noting that clients "need to detect the changeover of the active server module so that 
communication can be established with the new active server module." In other words, the 
same clients (e.g., field apparatuses) may be adapted to communicate with either active (e.g., 
normal) or standby clients, which is different than the claimed system which includes normal 
field apparatuses and standby field apparatuses. Further, applicant respectfully traverses the 
comment in the outstanding Office Action that Figure 1 of Kumar shows multiple paths 
interconnecting server and client modules. 9 Applicant respectfully notes that the only 
connection shown between servers and clients in Figure 1 is the single bus 110. Accordingly, 
it is respectfully submitted that Kumar does not teach or suggest "normal and standby field 

7 Specification at page 30, line 10, to page 31, line 5. 

8 Office Action at page 7, lines 3-17. 

9 Office Action at page 7, lines 20-2 1 . 
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buses connected to the normal and standby field apparatuses, respectively, wherein said 
normal field bus is isolated from said standby field apparatus and said standby field bus is 
isolated from said normal field apparatus," as in Claim 4. 

Accordingly, it is respectfully submitted that independent Claim 4 and Claim 5, which 
depends therefrom, patentably define over Kumar . 

Further, as discussed during the interview, applicant respectfully submits that 
DeKoning does not teach or suggest normal and standby field buses isolated from standby 
and normal field apparatuses, respectively. In detailed diagrams of Figures 2 and 3, 
DeKoning only shows buses 150.1 and 150.2 (e.g., normal and standby field buses) 
connected to each other and connected to each disk drive 110 (e.g., field apparatus). 
Accordingly, it is respectfully submitted that DeKoning also does not teach or suggest 
"normal and standby field buses connected to the normal and standby field apparatuses, 
respectively, wherein said normal field bus is isolated from said standby field apparatus and 
said standby field bus is isolated from said normal field apparatus," as in Claim 4. 

Accordingly, it is respectfully submitted that independent Claim 4 and Claim 5, which 
depends therefrom, also patentably define over DeKoning . 

Accordingly, it is therefore respectfully submitted that independent Claim 4 and 
Claim 5, which depends therefrom, are allowable. 
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Consequently, in light of the above discussion and in view of the present amendment, 

the present application is believed to be in condition for allowance and an early and favorable 

action to that effect is respectfully requested. 



Respectfully submitted, 
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\ • Inver/ior: Yoshiyuki NITTA 

FIELD APPARATUS CONTROL SYSTEM 
AND COMPUTER -READABLE STORAGE MEDIUM 

RECEIVED 

BACKGROUND OF THE INVENTION 

AUG 1 2 2004 

Technology Center 21 00 

Field of the Invention 

The present invention relates to a field apparatus 
control system for controlling the field apparatus of 
various plants, such as a power plant, and a storage medium 
which a computer can read. 

Description of the Prior Art 

As shown in Figure 10, aA field apparatus control 
system 50 for controlling a field apparatus has a field 
^ apparatus control system main body 51 for controlling a 
plurality of field apparatuses 53, which are slaves for 
controlling a plant apparatus, connected to a field bus 52— 
qo Fig. — 10 ohowo . 

The field apparatus control system main body 51 
comprises a field bus communication control unit (master) 54 
for performing information (data) communication processing 
between a plurality of field apparatuses 53 and the local 
field apparatus control system main body 51 via the field 
bus 52, a main control unit 55 having a CPU for controlling 
the field apparatuses 53 and a memory for storing a data 
program, and a driver 54 which is incorporated into the main 
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control unit 55 (memory thereof) for controlling data 
input /output processing between the field bus communication 
control unit 54 and the main control unit 55 . 

This memory includes a storage medium, such as a 
floppy disk, magneto-optical disk CD-R (Compact Disk - 
Recordable) , CD - R/W (Compact Disk Rewritable) , DVD 
(Digital Versatile Disk) , and IC memory, and the main 
control unit 55 has a drive unit, according to the type of 
the storage medium, as a memory, so that a data program can 
be read/written from/ to the memory. 

One field bus communication control unit 54, which is 
a master, is set for a plurality of slaves (field 
apparatuses) 53. The data transmission path of the field 
bus 52 is structured as a single transmission path, as shown 
in Fig. 10. 

In other words, the main control unit 55 performs, by 
operations based on the driver 56, processing for inputting 
the apparatus status information (status information) 
transmitted from the field apparatuses 53 side to the local 
main control unit 55 via the field bus communication control 
unit 54, and processing for outputting the information, such 
as a control instruction, to the field apparatuses 53 via 
the field bus communication control unit 54 . 

However, according to a conventional field apparatus 
control system, if the field bus communication control unit 
54 or a field bus (transmission path) 52 fails, data 
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input /output operations between the field apparatus 53 and 
the main control unit 55 stops, which dropo thereby reducing 
the reliability of the field control unit. 

SUMMARY OF THE INVENTION 

The present invention is directed to overcome the 
foregoing problems . 

Accordingly, it is an object of the present invention 
to provide a field apparatus control system and computer- 
readable storage medium which are configured to have a 
duplication of at . least one communication control unit and 
field bus using a general purpose field bus without adding 
original protocol, so as to improve the reliability of the 
field apparatus control system 

To achieve such object, according to one aspect of the 
present invention, there is provided a field apparatus 
control system for controlling a field apparatus connected 
to a field bus, comprising: duplicated main control units 
for controlling the field apparatus; and duplicated 
communication control units for processing information 
communication between the main control units and the field 
apparatus via the field bus, respectively, wherein one of 
the duplicated main control units and one of the 
communication control units constitute a normal system, and 
other of the duplicated main control units and other of the 
communication control units constitute a standby system and 
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each of the normal system of communication control unit and 
the standby system of communication control unit have a same 
address on a network via the field bus, which is allocated 
to each of the normal and standby systems of communication 
control systems, and wherein information that is outputted 
to the address from the field apparatus via the field bus is 
transmitted to the normal and standby systems of 
communication control units, respectively. 

In a preferred embodiment of this aspect, each of said 
normal and standby systems of communication control units 
further comprises: operation request transmission means, 
when the ewa— communication control unit is the normal system, 
for transmitting an operation request to the field apparatus 
based on control information, said control information being 
transmitted from the main control unit of the ewfi — system; 
means for receiving response information corresponding to 
the operation request transmitted from the field apparatus 
to the address so as to transmit the received response 
information to the main control unit of the evm — system; 
means for judging whether or not failure occurs to the ewn 
system; means for stopping operation of the ewn 
communication control unit, when the j udgcmcnt j udgment means 
judges that failure occurs to the ewfi — system and the own 
communication control unit is the normal system; means that, 
when the ewn — communication control unit is the standby 
system, monitors the operation of the other communication 
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control unit, which is the normal system, and, when, by the 
monitored result, detecting the stop of the operation of the 
other communication control unit, switches the ewn 
communication control unit, which is the standby system, to 
the normal system. 

According to this aspect of the present invention 
described above, the communication control unit is 
duplicated, and same address are allocated to each of the 
communication control units so that, even if one unit fails 
information communication processing between the 
corresponding main control unit and the field apparatus via 
the field bus can be constituted using the other unit. 

This aspect of the present invention has an 
arrangement that said field bus connected to the field 
apparatus is duplicated, and each of said communication 
control units further comprises: operation request 
transmission means, when the ©wr- communication control unit 
is the normal system, for transmitting an operation request 
to the field apparatus via each of the duplicated field 
buses based on control information, said control information 
being transmitted from the main control unit of the ewn 
system; first judgment means for judging whether or not 
response information corresponding to the operation request 
is transmitted from the field apparatus via one of the 
duplicated field buses; means for receiving the transmitted 
response information, when the first judgment means judges 
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that the response information is transmitted, so as to 
transmit the received response information to the main 
control unit of the evm — system; second judgment means for 
judging whether or not response information corresponding to 
the operation request is transmitted from the field 
apparatus to the address via the other one of the duplicated 
field buses when the first judgment means judges that the 
response information is not transmitted; means for receiving 
the transmitted response information when the second 
judgment means judges that the response information is 
transmitted so as to transmit the received response 
information to the main control unit of the own — system; 
means for transmitting information to indicate the 
generation of failure in the duplicated field buses to the 
main control unit of the own system when the second judgment 
means judges that the response information is not 
transmitted; failure judgment means for judging whether or 
not failure occurs to the owr — system; means for stopping 
operation of the ewn — communication control unit, when the 
ewH— communication control unit is the normal system and the 
failure judgment means judges that failure occurs to the 
local system; and means, when the ewn— communication control 
unit is the standby system, that monitors the operation of 
the other communication control unit, which is the normal 
system, and, when, by the monitored result, detecting the 
stop of the operation of the other communication, switches 
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the ewe — communication control unit, which is the standby 
system, to the normal system. 

According to this aspect of the invention, the 
communication control unit is duplicated and the field bus 
is also duplicated, so that even if one unit fails, the 
information communication processing between the 
corresponding main control unit and the field apparatus via 
the field bus can be continued using the other unit, and 
even if one field bus fails, the information communication 
processing between the information communication unit and 
the field apparatus via the field bus can be continued using 
the other field bus, making it possible to improve the 
reliability of the field apparatus control system. 

To achieve such object, according to another aspect of 
the present invention, there is provided a field apparatus 
control system for controlling duplicated field apparatuses 
constituting normal and standby systems of field apparatuses, 
comprising: duplicated field buses connected to the 
duplicated field apparatuses, respectively, said one of 
duplicated field buses being referred as a normal system 
field bus and other thereof being referred as a standby 
system field bus; duplicated main control units for 
controlling the duplicated field apparatuses; and duplicated 
communication control units for processing information 
communication between the main control units and the 
duplicated field apparatuses via the duplicated field buses, 
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respectively, wherein one of the duplicated main control 
units and one of the communication control units constitute 
a normal system, and the other of the duplicated main 
control units and other of the communication control units 
constitute a standby system, and the normal system of 
communication control unit is connected via the normal 
system field bus to the normal system field apparatus so 
that the normal system of communication control unit 
executes information communication processing between the 
main control unit of the own standby system and the normal 
system field apparatus via the normal system field bus, and 
wherein the standby system of communication control unit is 
connected via the standby system field bus to the standby 
system field apparatus so that the standby system of 
communication control unit executes information 
communication processing between the main control unit of 
the own normal system and the standby system field apparatus 
via the standby system field bus. 

In preferred embodiment of this another aspect, 
wherein said normal system of communication control unit 
further comprises: operation request transmission means for 
transmitting an operation request to the normal system field 
apparatus via the normal system field bus based on the 
normal system field apparatus control information which is 
transmitted from the main control unit of the own system; 
means for receiving response information corresponding to 
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the operation request which transmitted from the normal 
system field apparatus via the normal system field bus so as 
to transmit the received response information to the main 
control unit of the own system; failure judgment means for 
judging whether or not failure occurs to the own system; and 
means for stopping operation of the ewn — communication 
control unit when the failure judgment means judges that 
failure occurs to the own system, and wherein said standby 
system of communication control unit comprises means for 
monitoring operation of the other communication control unit 
which is the normal system so as to switch the ewR 
communication control unit which is the standby system to 
the normal system when detecting the stop of the operation 
of the other communication control unit according to the 
monitored result. 

According to the another aspect of the present 
invention, the field apparatus and the field bus are 
duplicated, and the duplicated field apparatuses, field 
buses and the duplicated communication control units are 
connected such that communication is possible so as to 
construct different networks from each other, so that 
duplication is possible without changing the configuration 
of the field apparatuses. 

Therefore, even if one of the duplicated field 
apparatuses fails, the . information communication to other of 
the duplicated field apparatuses can be continued through 
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the field bus connected to other of the duplicated field 
apparatuses, making it possible to improve the reliability 
of the field apparatus control system. 

To achieve such object, according to further aspect of 
the present invention, there is provided a field apparatus 
control system for controlling a field apparatus, 
comprising: duplicated first and second field buses 
connected to said field apparatus; a main control unit for 
controlling said field apparatus; and a communication 
control unit for processing information communication 
between the main control unit and the field apparatus via 
the first and second field buses, wherein said communication 
control unit further comprises operation request 
transmission means for transmitting an operation request to 
the field apparatus via the first and second field buses 
based on control information transmitted from the main 
control unit; first judgment means for judging whether or 
not response information corresponding to the operation 
request is transmitted from the field apparatus via one of 
the first and second field buses; means for receiving the 
transmitted response information when the first judgment 
means judges that the response information is transmitted so 
as to transmit the received response information to the main 
control unit; second judgment means for judging whether or 
not response information corresponding to the operation 
request is transmitted from the field apparatus via other of 
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the first and second field buses when the first judgment 
means judges that the response information is transmitted; 
means for receiving the transmitted response information 
when the second judgment means judges that the response 
information is transmitted so as to transmit the received 
response information to the main control unit; and means for 
transmitting information to indicate the generation of 
failure in the first and second field buses to the main 
control unit when the second judgment means judges that the 
response information is not transmitted. 

According to the further aspect of the present 
invention, even if one of the duplicated field buses fails, 
the information communication to the field apparatus can be 
continued through other of the duplicated field buses, 
making it possible to improve the reliability of the field 
apparatus control system with respect to the failure of the 
field bus. 

To achieve such object, according to still further 
aspect of the present invention, there is provided a storage 
medium used in a field apparatus control system for 
controlling a field apparatus connected to a field bus, said 
field apparatus control system comprising duplicated normal 
and standby main control units for controlling the field 
apparatus; and duplicated normal and standby computers for 
processing information communication between the normal and 
standby main control units and the field apparatus via the 
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field bus, respectively, said storage medium being readable 
by at least one of the normal and standby computers 
comprising: means for causing at least one of the normal and 
standby computers to transmit an operation request to the 
field apparatus based on control information when the ewn 
computer is the normal computer, said control information 
being transmitted from the normal main control unit; means 
for causing at least one of the normal and standby computers 
to receive response information corresponding to the 
operation request transmitted from the field apparatus to an 
address, said address being allocated to the normal and 
standby computers; means for causing at least one of the 
normal and standby computers to transmit the received 
response information to the main control unit of an — e*tfn 
system corresponding to the at least one of the normal and 
standby computers; means for causing at least one of the 
normal and standby computers to judge whether or not failure 
occurs to the own system; means for causing at least one of 
the normal and standby computers to, when the own computer 
is the normal computer and it* is judged that failure occurs 
to the own computer, stop the operation of the ewn— computer ; 
and means for causing at least one of the normal and standby 
computers to monitor operation of the normal computer when 
the own computer is the standby computer, and when, by the 
monitored result, detecting the stop of the operation of the 
normal computer, to switch the ewH — computer which is the 
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standby computer to the normal computer. 

As described above, according to the present invention, 
where a same address is allocated to the normal system 
communication control unit and the standby system 
communication control unit, the communication control unit 
is duplicated without using an original protocol so that 
even if a failure occurs to one unit, information 
communication processing between the corresponding main 
control unit and the field apparatuses via the field bus can 
be continued using the non- failed communication control unit, 
so that the reliability of the field apparatus control 
system can be improved. 

Furthermore, according to the present invention, where 
the communication control unit is duplicated and the field 
bus is also duplicated, information communication with the 
field apparatuses via the field bus is continued, even if a 
failure occurs to one of the duplicated communication 
control units, and information communication processing for 
the field apparatuses can be continued using the other field 
bus even if a failure occurs to one field bus. Therefore 
the reliability against a communication control unit failure 
and field bus (transmission path) failure can be 
considerably improved. 

BRIEF DESCRIPTION OF THE DRAWINGS 
Other aspects of the present invention will become 
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apparent from the following description of embodiments with 
reference to the accompanying drawings in which: 

Fig. 1 is a block diagram depicting a general 
configuration of a field apparatus control system according 
to a first embodiment of the present invention; 

Fig. 2 is a flow chart depicting an example of 
processing of a field bus communication control unit of the 
field apparatus control system according to the first 
embodiment of the present invention; 

Fig. 3 is a block diagram depicting a general 
configuration of a field apparatus control system according 
to a second embodiment of the present invention; 

Fig. 4 is a flow chart depicting an example of 
processing of a field bus communication control unit of the 
field apparatus control system according to the second 
embodiment of the present invention; 

Fig. 5 is a block diagram depicting a general 
configuration of a field apparatus control system according 
to a third embodiment of the present invention; 

Fig. 6 is a flow chart depicting an example of 
processing of a field bus communication control unit of the 
field apparatus control system according to the third 
embodiment of the present invention; 

Fig. 7 is a block diagram depicting a general 
configuration of a field apparatus control system according 
to a fourth embodiment of the present invent ion ; 
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Fig. 8 is a flow chart depicting an example of 
processing of a field bus communication control unit of the 
field apparatus control system according to the fourth 
embodiment of the present invention; 

Fig. 9 is a block diagram depicting a modification of 
the field apparatus control system according to the fourth 
embodiment of the present invention; and 

Fig. 10 is a block diagram depicting a general 
configuration of a conventional field apparatus control 
system. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
The embodiments of the present invention will be 
described hereinafter. 
(First embodiment) 

Fig. 1 is a block diagram depicting a general 
configuration of a field apparatus control system according 
to the first embodiment of the present invention. 

The field apparatus control system 1 shown in Fig. 1 
has a field apparatus control system main body 10 for 
controlling a plurality of field apparatuses 3 for 
controlling plant apparatuses of a plant, which are 
connected to the field bus 2, and this field apparatus 
control system main body (hereafter referred to "system 
main body") 10 has a duplicated standby redundant 
configuration . 
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As shown in Fig. 1, the system main body 10 has a 
duplicated control system, that is, the normal control 
system (hereafter normal system) 11A and the standby 
control system (hereafter standby system) 11B, as control 
systems for a plurality of field apparatuses 3. 

The plurality of field apparatuses includes input 
apparatuses (for example, in a case of a power plant as a 
plant, status information input apparatuses for inputting 
status information such as current value and voltage value 
of a plant apparatus in the power plant into the system 
main body 10) and output apparatuses (for example, in a 
case of a power plant as a plant, displays for operators 
and switching apparatuses for switching a predetermined 
plant apparatus) connected to the field bus 2. 

The normal system 11A and the standby system 11B are 
connected to the field bus 2 respectively such that 
communication is possible, and comprise field bus 
communication control units 12A and 12B for information 
communication processing between the own — systems 11A and 
11B and the field apparatuses 3, respectively. 

The normal system 11A and the standby system 11B 
also comprise main control units 13A and 13B each of which 
has a CPU (computer) for controlling field apparatuses 3 
and a memory for storing a program and data related to the 
processing of the CPU, that — which the CPU can read, 
respectively . 
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The normal system 11A and the standby system 11B 
also comprise drivers (program modules) 14A and 14B, which 
are incorporated in the main control units 13A and 13B so 
as to run thereon, respectively. The drivers 14A and 14B 
each controle information input/output processing between 
the own field bus communication control unit and the_ own 
main control unit , of the normal system 11A and the 
standby system 11B , respectively. 

The system main body 10 has an internal bus 15 which 
enables communication of the normal system 11A (field bus 
communication control unit 12A, main control unit 13A) and 
the standby system 11B (field bus communication control 
unit 12B, main control unit 13B) . 

The field bus communication control units 12A and 
12B have CPUs (computers) 16A and 16B for executing 
information communication processing between the 
respective own systems 11A and 11B (drivers 14A and 14B) 
and the field apparatuses 3, and memories 17A and 17B as 
computer- readable storage mediums for storing data 
programs P related to the processing of the respective own 
CPUs, which the CPUs can read. 

For example, as each of the memories 17A and 17B, a 
floppy disk, magneto-optical disk CD-R, CD - R/W, DVD, and 
IC memory can be used. 

For the field bus communication control unit 12A of 
the normal system and the field bus communication control 
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unit 12B of the standby system, which are connected to the 
field bus 2, addresses are allocated for specifying the 
field bus communication control units 12A and 12B on the 
information communication network via the field bus 2 — a^e 
allocated . 

Particularly in the present embodiment, a same address 
is allocated to each of the field bus communication control 
units 12A and 12B, and the allocated address is held in each 
microprocessor of each field apparatus 3, and each of the 
respect ive ewH field bus communication control units 12A and 
12B. 

The normal system 11A (field bus communication control 
unit 12A, normal system main control unit 13A, driver 14A) 
and the standby system 11B (field bus communication control 
unit 12B, standby system main control unit 13B, driver 14B) 
execute the same programs (program modules) , and the standby 
system 11B maintains the same status as the normal system 
11A (hot standby system) . 

Overall operation of the field apparatus control 
system 1 of the present embodiment will now be described 
focusing mainly on the processing of the field bus 
communication control units 12A and 12B. 

Each of the field bus communication control units 
(hereafter communication control units) 12A and 12B of the 
normal system 11A and the standby system 11B operates based 
on the program P stored in the memories 17A and 17B. 
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That is, the communication control units 12A and 12B 
periodically diagnose whether or not a_failure occurs to the 
local systems 11A and 11B, in each hardware block and each 
software module- J. for example^ 4 see Step SI of Figure 2 ) , 
and if it is judged that a failure does not occur as a 
result of the judgment (normal operation) ( e.g. , Step SI -» 
NO) , then the communication control units 12A and 12B read 
output information for the first field apparatus 3 from the 
drivers 14 A and 14 B of the main control units 13 A and 14 B_^ 
respectively ( e.g. , Step S2) . 

Because of this output information for the first field 
apparatus 3, the communication control units 12A and 12B 
skip Step S3 which indicates the loop end of the later 
mentioned repeat processing, and judges whether it is the 
ewe — communication control unit irS in the normal system or 
not (Step S4) . 

Since the judgment result by the normal system 
communication control unit 12 A in Step S4 is YES (normal 
system) , the communication control unit 12A judges whether 
or not the output information which is read is for the input 
apparatus (field apparatus for input) (Step S5) . 

As a result of the judgment in Step S5, if the output 
information is on the field apparatus for input (Step S5 
YES) , the communication control unit 12 A transmits an input 
request to the corresponding field apparatus 3 via the field 
bus 2 (Step S6) . 
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The corresponding field apparatus 3 executes 
processing (for example, status information detection 
processing) based on the content of the transmitted input 
request, and transmits the input response (for example, 
detected state information) to the address of the 
communication control unit 

As a result of the judgment in Step S5, if the output 
information is on the output apparatus (field apparatus for 
output) (Step S5 -» NO) , the communication control unit 12A 
transmits the output information to the corresponding field 
apparatus for output via the field bus 2 (Step S7) . 

The corresponding field apparatus 3 executes 
processing (e.g.^_ such control processing as open/close 
operation switching processing) based on the information 
content of the transmitted output information, and transmits 
the output response (e.g.^ status information after control 
processing) to the address of the communication control unit 
via the field bus 2 . 

On the other hand, because the result of the judgment 
by the standby system communication control unit 12B in Step 
S4 is NO (standby system) , the communication control unit 
12B sifts to the processing of Step S9, which will be 
described later, without transmitting an input/output 
request in Step S6 or Step S7 . 

Then, since the same address has been assigned to the 
normal system communication control unit 12 A and the standby 
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system communication control unit 12B # the input response or 
the output response transmitted from the field apparatus 3 
is transmitted to each of the normal system communication 
control unit 12A and each of the standby system 
communication control unit 12B, and the normal system 
communication control unit 12 A and the standby system 
communication control unit 12B receives the transmitted 
input response or the output response (input /output 
response) (Step S8) . 

Then, the normal system communication control unit 12A 
returns to the processing to indicate the loop end in Step 
S3 as a processing to indicate the loop end in Step S9, 
executes the processing in Step S3 to Step S9 repeatedly 
according to the output information for all the field 
apparatuses 3 (Step S9) , and as a result, all the 
input /output responses corresponding to all pieces of the 
output information are received by the normal system 
communication control unit 12A and the standby system 
communication control unit 12B, respectively. 

The normal system communication control unit 12A and 
the standby system communication control unit 12B transmits 
the input /output responses corresponding to all the received 
pieces of the output information to the drivers 14A and 14B 
of the local systems 11A and 11B (Step S10) , and processing 
ends . 

In a case where it is diagnosed that failure occurs as 
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a result of the judgment in Step SI (when failure occurs, 
Step SI -> YES) , the communication control unit of the failed 
system (the normal system 11A or the normal — s t andby sy s t em 
11B) judges whether or not the failed system-; — which — i-s — the 
own oyotcm, is the normal system 11A (Step Sll) . 

If the failed system is the standby system 11B, the 
result of judgment by the standby system communication 
control unit 12B in Step Sll is NO (standby system) , so the 
standby system communication control unit 12B stops 
communication control processing, that is, the communication 
control processing between the driver 14B and the field 
apparatus 3, and the communication control unit 12A of the 
normal system 11A, which is not failed, transits to Step S2 
and executes processing in Step S2 to Step S10 (Step S12) . 

In a case where the failed system is the normal system 
11A, the result of judgment by the normal system 
communication control unit 12A in Step Sll is YES (normal 
system) , so the normal system communication control unit 12A 
stops communication processing, that is, communication 
control processing between the driver 14A and the field 
apparatus 3, the standby system communication control unit 
12B, which is monitoring the operation of the normal system 
communication control unit 12A, detects the occurring of the 
failure (stop of communication control processing) in the 
normal system communication control unit 12A, switches the 
own — system (standby system) to the normal system, and 
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transits to Step S2 as the normal system communication 
control unit 12B, and executes processing in Step S2 to Step 
S10 (Step S13) . 

As a result, if a failure occurs to the normal system 
11A, the communication control unit 12B of the standby 
system 11B executes processing so that information 
input /output processing between the main control unit 13B 
(driver 14B) and the field apparatus 3 via the field bus 2 
can be continuously executed. 

As described above, according to the field apparatus 
control system 1 of the present embodiment, the field 
apparatus control system is duplicated as the normal system 
11A and the standby system 11B, and a same address is 
allocated to the communication control units 12A and 12B of 
the normal system 11A and the standby system 11B, so it is 
possible to transmit the same input/output response as the 
normal system communication control unit 12 A to the standby 
system communication control unit 12B. 

Therefore, even if a failure occurs to the normal 
system 11A, it is possible to continuously execute 
information input/output processing between the main control 
unit 13B (driver 14B) and the field apparatus 3 via the 
field bus 2, including the input/output request transmission 
processing for the field apparatus 3 and processing to 
transmit the input/output response to the driver 14B, which 
is transmitted to the standby system communication control 
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unit 12B, so that the reliability of the field apparatus 
control unit 10 can be considerably improved. 

In addition, by assigning a same address to the 
communication control units of the normal system and the 
standby system, the standby system can receive the input 
response and the output response from the field apparatus to 
the normal system, so that the standby system can always 
hold the latest state of the plant. Therefore it is 
unnecessary to update the plant state when operation is 
switched from the normal system to the standby system, which 
means that the time required to switch processing is 
decreased compared to the case when a different address is 
assigned to each communication control unit, making it 
possible to improve the operating efficiency of the system. 
(Second embodiment) 

Fig. 3 is a block diagram depicting a general 
configuration of a field apparatus control system according 
to the second embodiment of the present invention. 

In the field apparatus control system 1A shown in Fig. 
3, components the same as those in the field apparatus 
control system 1 in Fig. 1 are denoted with the same symbols, 
for which description is omitted or simplified. 

In the present embodiment, the field bus 2 and a 
plurality of field apparatuses 3 are duplicated to be a 
standby redundancy structure respectively, as shown in Fig. 
3. 
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That is, the field bus 2 is comprised of the normal 
system field bus 2A and the standby system field bus 2B, and 
the plurality of field apparatuses 3 are comprised of the 
normal system field apparatuses 3A (3A1 to 3A3) connected to 
the normal system field bus 2A and the standby system field 
apparatuses 3B (3B1 to 3B3) , which is the same type as the 
normal system field apparatuses 3A (3A1 to 3A3) connected to 
the standby system field bus 2B. 

The system main body 2 0 of the present embodiment has 
the normal system 11A as a control system for the normal 
system field apparatuses 3A, including the input/output 
apparatuses connected to the normal system field bus 2A, and 
has the standby system 11B as a control system for the 
standby system field apparatuses 3B connected to the standby 
system field bus 2B. 

The normal system 11A is connected to the normal 
system field bus 2A, and has a field bus communication 
control unit (communication control unit) 21A for executing 
information communication processing between the local 
system 11A and the normal system field apparatuses 3A, and 
the standby system 11B is connected to the standby system 
field bus 2B, and has a field bus communication control unit 
(communication control unit) 2 IB for executing information 
communication processing between the own system 11B and the 
standby system field apparatuses 3B. 

The field bus communication control units 21A and 
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21B have CPUs (computers) 22A and 22B for executing 
information communication processing between the own 
systems 11A and 11B (drivers 14A and 14B) and the field 
apparatuses 3, and memories 23A and 23B as computer- 
readable storage mediums that the CPUs can read for 
storing data programs PI related to the processing of the 
ewa respective CPUs-; — which the CPUa can read . 

General operation of the field apparatus control 
system 1A of the present embodiment will now be described 
focusing largely on the processing of the field bus 
communication control units 21A and 2 IB. 

Each of the field bus communication control units 
(hereafter communication control units) 21A and 22B of the 
normal system 11A and the standby system 11B operates based 
on the program PI stored in the memories 23A and 23B. 

That is, just like the first embodiment, the 
communication control units 21A and 2 IB of the normal system 
11A and the standby system 11B execute processing in Steps 
SI to S3 , and read the output information from the 
predetermined normal system field apparatus 3A and the 
standby system field apparatus 3B during normal operation. 

At this time, according to the present embodiment, the 
normal system communication control unit 21A and the standby 
system communication control unit 2 IB first judge whether 
the output information read from the predetermined field 
apparatuses 3 A and 3B is for the input apparatus 3 (Step 



26 



S20) . 

If the output information is for the input apparatus 
(field apparatus for input) as a result of the judgment in 
Step S2 0 (Step S20 -» YES) , then the normal system 
communication control unit 21A and the standby system 
communication control unit 21B, just like the first 
embodiment, execute processing in Step S6 for the 
corresponding normal system field apparatus 3A and the 
standby system field apparatus 3B, so that the input request 
is transmitted to each of the normal system field apparatus 
3 A and the standby system field apparatus 3B, and the input 
response transmitted from each of the corresponding normal 
system field apparatus 3A and the standby system field 
apparatus 3B is received by each of the corresponding normal 
system communication control unit 12A and the standby system 
communication control unit 12B (Step S8A) . 

If the output information is for the output apparatus 
3 as a result of the judgment in Step S20, on the other hand 
(Step S2 0 -» NO) , then the normal system communication 
control unit 21A and the standby system communication 
control unit 2 IB judge whether the ewn— communication control 
unit is the normal system (Step S21) . 

Since the judgment result by the normal system 
communication control unit 21A in Step S21 is YES (normal 
system) , the communication control unit 21A executes 
processing in Step S7 for the normal system field apparatus 
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3A, so that the output response transmitted from the 
corresponding normal system field apparatus 3A is received 
by the normal system communication control unit 12A (Step 
S8B) . 

Since the judgment result by the standby system 
communication control unit 2 IB in Step S21 is NO (standby 
system) , the communication control unit 2 IB transmits the 
later mentioned processing in Step S9 without executing the 
output information transmission processing in Steps S7 and 
S8B, so as to prevent the transmission of different output 
information to the same type of field apparatuses 3A and 3B. 

Then the normal system communication control unit 21A 
returns to the processing to indicate loop end in Step S3 as 
a processing to indicate loop end in Step S9, executes the 
processing in Steps S3, S20, S21, S6 to S8A and S8B 
repeatedly (loop) , executes the input /output processing 
operation corresponding to the output information to all the 
normal system field apparatuses 3A (Step S9) , and as a 
result, all the input response/output responses from the 
normal system field apparatuses 3A corresponding to all the 
output information are received by the normal system 
communication control unit 12A respectively. 

The standby system communication control unit 2 IB, on 
the other hand, returns to the processing to indicate the 
loop end in Step S3 as the processing to indicate the loop 
end in Step S9, executes processing in Steps S3, S2 0, S21, 
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and S6 to S7 repeatedly (loop) , executes input processing 
corresponding to the output information to all the input 
apparatuses (field apparatuses 3 for input) in the standby 
system field apparatuses 3B (Step S9) , and as a result, all 
input responses from all the input apparatuses in the 
standby system field apparatuses 3B are received by the 
standby system communication control unit 2 IB, respectively. 

Then, by the processing in Step S10, the input 
responses /output responses corresponding to all the output 
information to the normal system field apparatuses 3A are 
transmitted to the driver 14A of the normal system 11A, and 
input responses corresponding to all the output information 
to the input apparatuses in the standby field apparatuses 3B 
are transmitted to the driver 14B of the standby system 14B. 

In the present embodiment as well, if a failure has 
occurred as a result of the judgment in Step SI (Step SI -» 
YES), and if the. failed system is the standby system 11B for 
example, processing in Steps S2 , S3, S2 0, S21, S6 to S8A and 
S8B are repeatedly executed for the normal system field 
apparatuses 3A by the communication control unit 21A of the 
normal system 11A which is not failed, so that information 
input /output processing between the main control unit 13A 
(driver 14A) and the normal system field apparatuses 3A is 
executed continuously (see Steps Sll to S12) . 

If the failed system is the normal system 11A, on the 
other hand, the failure generation in the normal system 11A 
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(operation stop of the normal system communication control 
unit 21A) is detected by the communication control unit 2 IB, 
the communication control unit 2 IB is switched to the normal 
system, and processing in Steps S2, S3, S2 0, S21, S6 to S8A 
and S8B is repeatedly executed by this communication control 
unit 2 IB, and information input /output processing between 
the main control unit 13B (driver 14B) , and standby system 
field apparatuses 3B is continuously executed (see Steps Sll, 
S13) . 

As a result, just like the first embodiment, even if a 
failure occurs to the normal system 11A, information 
input /output processing between the main control unit 13B 

(driver 14B) and the standby system field apparatuses 3B via 
the field bus 2 is continuously executed by the 
communication control unit 2 IB of the standby system 11B. 

In particular according to the present embodiment, the 
field apparatuses 3 are duplicated (normal system field 
apparatuses 3A and standby system field apparatuses 3B) so 
that even if a failure occurs to at least one , for example 

(e.g. field apparatus SAl^-)- of the normal s^ystem field 
apparatuses 3A, the above mentioned processing in Steps S2 , 
S3, S20, S21, S6 to S8A and S8B is executed for the standby 
system field apparatuses 3B1 corresponding to the field 
apparatus 3A1 using the standby system communication control 
unit 2 IB, so that information input /output processing 
between the field apparatus 3B1, which is identical to the 
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failed field apparatus 3A1, and the main control unit 13B 
(driver 14B) can be continuously executed. 

Therefore, in addition to the effect of the first 
embodiment, the reliability of the field apparatus control 
unit 2 0 can be improved even more than the first embodiment, 
since even if a failure occurs to one of the duplicated 
field apparatuses 3, input/output request transmission 
processing and input /output response receiving processing 
for all types of field apparatuses 3, including a field 
apparatus which type is the same as the failed field 
apparatus, can be continuously executed. 
(Third embodiment) 

Fig. 5 is a block diagram depicting a general 
configuration of a field apparatus control system IB 
according to the third embodiment of the present invention. 
Components the same as those in the field apparatus control 
system 1 in Fig. 1 are denoted with the same symbols, for 
which description is omitted or simplified. 

In the present embodiment, the system main body 3 0 has 
a single control system 11 controlling a plurality of field 
apparatuses 3 , including an input apparatus and output 
apparatus as shown in Fig . 5 . 

This control system 11 has the same configuration as 
the normal system control system 11A or the standby system 
control system 11B shown in the first embodiment, and 
comprises a field bus communication control unit 31 for 
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processing information communication between the 
ewa corresponding system 11 and the field apparatuses 3, a 
main control unit 13 for controlling the field apparatuses 3, 
and a driver 14 incorporated into the main control unit 13 . 

The field bus communication control unit 31 has a 
CPU (computer) 3 2 for executing information communication 
processing between the system 11 (driver 14) and the field 
apparatuses 3, and a memory 33 as a computer- readable 
storage medium for storing a data program P2 related to 
the processing of the CPU, which the CPU can read. 

In the present embodiment, each field apparatus 3 is 
connected to the duplicated transmission paths (I system 
field bus 34A, II system field bus 34B) respectively, and 
the field bus communication control unit (communication 
control unit) 31 is connected to the I system field bus 34A 
and the II system field bus 34B so that communication is 
possible. 

General operation of the field apparatus control 
system IB of the present embodiment will now be described 
focusing largely on the processing of the communication 
control unit 31. 

The field bus communication control unit (hereafter 
communication control unit) 31 of the system 11 operates 
based on the program P2 stored in the memory 32 . 

In the present embodiment, the communication control 
unit 31 executes processing in Steps SI to S3, just like the 
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first embodiment, and reads the output information to the 
field apparatuses 3 in a normal operation. If a failure has 
occurred as a result of the judgment in Step SI (Step SI -» 
YES) , the communication control unit 31 ends processing. 

If a failure has not occurred as the result of the 
judgment in Step SI (Step SI NO) , then, the communication 
control unit 31 executes input apparatus (field apparatus 
for input) / output apparatus (field apparatus for output) 
judgment processing in Step S5, and if the output 
information is on an input apparatus (Step S5 -» YES) , the 
communication control unit 31 transmits an input request to 
the corresponding field apparatus (field apparatus for 
input) 3 via the I system field bus 34A and II system field 
bus 34B, respectively (Step S30) . 

If the output information is on the output apparatus 3, 
on the other hand (Step S5 -» NO) , then the communication 
control unit 31 transmits output information to the 
corresponding field apparatus 3 via the I system field bus 
34A and the II system field bus 34B, respectively (Step S31) . 

Then the communication control unit 31 judges whether 
an input response or output response ( input /output response) 
has been transmitted from the I system field bus 34A (Step 
S32) . 

At this time, the field apparatus 3 corresponding to 
the input request executes processing based on the content 
of the transmitted input request, transmits the input 
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response to the address of the communication control unit 31 
via the I system field bus 34A and the II system field bus 
34B, and the field apparatus 3 corresponding to the output 
information executes processing based on the content of the 
transmitted output information, and transmits the output 
response to the address of the communication control unit 31 
via the I system field bus 34A and the II system field bus 
34B. 

When a failure has not occurred to the I system field 
bus 32A, the input/output response from the field apparatus 
3 for input/output is accurately transmitted to the 
communication control unit 31 via the I system field bus 34A, 
so the judgment by the communication control unit 31 in Step 
S32 is YES, and the communication control unit 31 receives 
the input/output response transmitted via the I system field 
bus 34A (Step S33) and transits to processing in Step S9 . 

If a failure has occurred to the I system field bus 
34A, the input /output response from the field apparatus 3 
for input/output is not transmitted to the communication 
control unit 31 via the I system field bus 34A, so that the 
judgment by the communication control unit 31 in Step S3 2 is 
NO, and the communication control unit 31 judges whether the 
input/output response has been transmitted from the II 
system field bus 34B (Step S34) . 

When a failure has not occurred to the II system field 
bus 34B, the input /output response from the input /output 
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apparatus 3 is accurately transmitted to the communication 
control unit 31 via the II system field bus 34B, so that the 
judgment by the communication control unit 31 in Step S34 is 
YES, and the communication control unit 31 receives the 
input/output response transmitted via the II system field 
bus 34B (Step S35) and transits to processing in Step S9. 

The communication control unit 3 0 returns to the 
processing to indicate the loop end in Step S3 as a 
processing to indicate the loop end in Step S9, executes 
processing in Steps S3, S5 and S3 0 to S3 5 repeatedly (loop), 
executes the input /output processing corresponding to the 
output information to all the field apparatuses 3 (Step S9) , 
and as a result, input/output responses corresponding to all 
the output information are received by the communication 
control unit 31, respectively. 

Then, the communication control unit 31 notifies the 
input responses /output responses corresponding to all the 
received output information to the driver 14 (Step S10) and 
ends processing. 

If a failure has occurred to the II system field bus 
34B during processing in Steps S3, S5, and S30 to S35 on the 
other hand, the input /output responses from the field 
apparatuses 3 for input/output are not transmitted to the 
communication control unit 31 via the II system field bus 
34B, so the judgment by the communication control unit 31 in 
Step S34 is NO, and the communication control unit 31 
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transmits the failures of the I system field bus 32A and II 
system field bus 32B (both system failures) to the driver 14 
(Step S36) , and end processing. 

That is, in the present embodiment, the field bus for 
connecting the communication control unit 31 and each field 
apparatus 3, such that communication is possible, is 
duplicated to be the I system field bus 34A and the II 
system field bus 34B, so that even if a failure has occurred 
to the I system field bus 34A which is used during normal 
operation, information input /output processing between the 
communication control unit 31 and each field apparatus 3 can 
be continuously executed via the II system field bus 34B 
(see S32, S34 and S35) , therefore the reliability of the 
field apparatus control unit 30 can be improved. 
(Fourth embodiment) 

Fig. 7 is a block diagram depicting a general 
configuration of a field apparatus control system 1C 
according to the fourth embodiment of the present invention. 

In the field apparatus control system 1C in Fig. 7, 
components the same as those in the field apparatus control 
system 1 in Fig. 1 are denoted with the same symbols, for 
which description is omitted or simplified. 

Just like the first embodiment, the system main body 
4 0 of the present embodiment has a duplicated control system, 
that is, the normal system 11A and the standby system 11B as 
a control system for a plurality of field apparatuses 3 . 
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Similarly to the first embodiment, the normal control 
system 11A and the standby control system 11B comprise field 
bus communication control units 41A and 4 IB for processing 
information communication between the local systems 11A and 
11B and the field apparatuses 3, main control units 13A and 
13B for controlling the field apparatuses 3, and drivers 14A 
and 14B which are incorporated into the main control units 
13A and 13B so as to run thereon, respectively. 

The field bus communication control units 41A and 
4 IB have CPUs (computers) 42A and 42B for executing 
information communication processing between the 
ew ftcorresponding systems 11A and 11B {drivers 14A and 14B) 
and the field apparatuses 3, and memories 43A and 43B as 
computer- readable storage mediums for storing data 
programs P3 , which the CPUs can read, related to the 
processing of t-he — ew ecorresponding CPUs-; — which — fcke — CPUo 
can read . 

In addition, just like the third embodiment, in the 
present embodiment, each field apparatus 3 is connected to 
the duplicated transmission paths (I system field bus 34A, 
II system field bus 34B) , respectively, and the field bus 
communication control units (communication control units) 
41A and 4 IB are connected to the I system field bus 32A and 
the II system field bus 32B respectively, such that 
communication is possible. 

General operation of the field apparatus control 
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system 1C of the present embodiment will now be described 
focusing largely on the processing of the communication 
control units 41A and 4 IB. 

Each of the field bus communication control units 
(hereafter communication control units) 41A and 4 IB of the 
normal system 11A and the standby system 11B operates based 
on the program P3 stored in the memories 43A and 43B. 

That is, similarly to the first embodiment, the 
communication control units 41A and 4 IB of the normal system 
11A and the standby system 11B execute processing in Steps 
SI to S7, and transmit input request or output information 
to an input apparatus or an output apparatus (field 
apparatus 3 for input or field apparatus 3 for output) 
corresponding to the output information transmitted from the 
drivers 14A and 14B of the on systems 11A and 11B. 

Then the communication control units 41A and 4 IB 
execute the processing in Steps S30 to S36 of the third 
embodiment respectively, that is, processing for judging a 
failure occurrence in the I system field bus 34A and the II 
system field bus 34B (see Step S32 and Step S34) , processing 
for receiving input/output responses which are transmitted 
via an non-failed field bus 34A or 34B (see Step S33 and 
S3 5) , and processing for notifying failures of both systems 
when failures have occurred to both systems (see Step S3 6) , 
and repeatedly executes processing in the above mentioned 
Steps S3 to S7, S30 to S36, and S9 for all the output 
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information . 

In the present embodiment, when a failure occurs to 
one of the normal system 11A and the standby system 11B 
(Step SI -> YES) , the communication control units 41A and 4 IB 
execute processing in Steps Sll to S13, that is, processing 
for stopping communication control for the standby system 
communication control unit 4 IB when failure occurs to the 
standby system side (see Steps Sll to S12) , and processing 
for the switching control right to the communication control 
unit 4 IB so as to execute communication control processing 
as the normal system when failure occurs to the normal 
system (see Steps Sll and S13) , so that the communication 
control unit 41A or 4 IB of the non- failed control system 
(normal system or standby system) repeatedly executes 
processing in Steps S2 to S5, S30 to S33, and S9 to S10, 
that is, information input /output processing between the 
field apparatuses 3 and the non- failed control system 
(normal system 11A or standby system 11B) via the non- failed 
field bus (I system field bus 34A or II system field bus 
34B) . 

As a result, in the present embodiment, even if a 
failure occurs to the normal system 11A, information 
input /output processing between the main control unit 13B 
(driver 14B) of the standby system 11B via the non- failed 
field bus (I system field bus 34A or II system field bus 
34B) and each field apparatus 3 can be continuously executed, 
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similar to the first embodiment, so that it is possible to 
considerably improve the reliability of the field apparatus 
control unit 40. 

Furthermore, in the present embodiment, even if a 
failure occurs to the I system field bus 34A which is used 
during normal operation, information input/output processing 
between the communication control units 41A and 4 IB and each 
field apparatus 3 can be continuously executed via the II 
system field bus 34B, so that, in addition to the above 
mentioned effect, it is possible to improve the reliability 
of the field apparatus control unit 4 0 even more. 

In the above embodiments, the transmission path to 
connect the field apparatus and the communication control 
units is simply stated as "field bus", but the field bus 
(transmission path) can be implemented by a cable system, or 
by a radio system using radio waves in a high frequency band 

For example, Fig. 9 shows a general configuration of 
the field apparatus control system ID having a radio system 
field bus. 

Fig. 9 shows an example when the duplicated I system 
field bus 34A and the II system field bus 34B in the field 
apparatus control system 1C in the fourth embodiment are 
implemented by radio transmissions 34A1 and 34B1 based on 
radio waves having different frequency bands (wave bands) . 

According to this modification, since the field buses 
(transmission paths) are constructed by radio transmission, 
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it is unnecessary to lay cable for the field buses, failure 
of the field buses related to cable can be eliminated, 
making it possible to improve the reliability of the field 
apparatus control unit . In addition, because of radio 
transmission, the flexibility of the arrangement of the 
plurality of field apparatuses can be improved, making it 
possible to dramatically decrease the cable cost and the 
cost related to laying cables. 

In particular, when this system is applied to a power 
plant, the field apparatuses tend to be influenced by high 
voltage surge due to the operation of plant apparatuses. 
The input portion of the field apparatus is normally 
insulated, but fails due to a short when a surge higher than 
the withstand voltage occurs. In this case, electric 
signals in the field apparatus leak into the field bus. 

When such a status occurs, in a case where each 
communication control unit and the plurality of field 
apparatuses are connected via electric cables, failure of 
one field apparatus makes it impossible for the 
communication control unit to communicate with all the other 
field apparatuses. 

Therefore, it is very effective to install an 
insulation means between the communication control unit and 
the field apparatus to minimize the influence of the above 
mentioned failure of a field apparatus. 

In order to insulate between the communication control 
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unit and the field apparatuses such that communication is 
possible, it may be considered to use a transmission system 
based on optical, in addition to a transmission system based 
on radio transmission described for this modification. 

However, if an optical cable is used as the 
transmission path (transmission cable) , cable handling is 
very complicated because a field apparatus is frequently 
installed near a plant apparatus. In addition, the 
communication control unit and the plurality of field 
apparatuses are connected by a so called "multi-drop system" , 
so that the addition of a field apparatus requires to adjust 
an overall light level, which means the adjustment of the 
light level is very difficult for an optical transmission 
unit which has a small dynamic range. 

In a case where the radio system of the present 
modification is used, on the other hand, data communication 
is possible without complicated procedures, including the 
above mentioned handling of the optical cable and the 
adjustment of the light level, so that it is possible to 
make free of the complicated procedures so as to further 
improve the practicality of this system. 

Needless to say, the. radio system field bus can be 
applied to field apparatus control systems of other 
embodiments as well . 

While there has been described what is at present 
considered to be the preferred embodiments and 
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modifications of the present invention. It will be 
understood that various modifications which are not 
described yet may be made therein, and it is intended to 
cover in the appended claims all such modifications as 
fall within the true spirit and scope of the invention. 
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WHAT IS CLAIMED IS: 



1. A field apparatus control system for controlling a 
field apparatus connected to a field bus, comprising: 

duplicated main control units for controlling the 
field apparatus; and 

duplicated communication control units for processing 
information communication between the main control units and 
the field apparatus via the field bus, respectively, 

wherein one of the duplicated main control units and 
one of the communication control units constitute a normal 
system, and other of the duplicated main control units and 
other of the communication control units constitute a 
standby system and each of the normal system of 
communication control unit and the standby system of 
communication control unit have a same address on a network 
via the field bus, which is allocated to each of the normal 
and standby systems of communication control systems, and 

wherein information that is outputted to the address 
from the field apparatus via the field bus is transmitted to 
the normal and standby systems of communication control 
units, respectively. 

2 . The field apparatus control system according to 
claim 1, wherein each of said normal and standby systems of 
communication control units further comprises: 
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operation request transmission means, when the own 
communication control unit is the normal system, for 
transmitting an operation request to the field apparatus 
based on control information, said control information being 
transmitted from the main control unit of the own system; 

means for receiving response information corresponding 
to the operation request transmitted from the field 
apparatus to the address so as to transmit the received 
response information to the main control unit of the own 
system; 

means for judging whether or not failure occurs to the 
own system; 

means for stopping operation of the own communication 
control unit, when the judgement means judges that failure 
occurs to the own system and the own communication control 
unit is the normal system; 

means that, when the own communication control unit is 
the standby system, monitors the operation of the other 
communication control unit, which is the normal system, and, 
when, by the monitored result, detecting the stop of the 
operation of the other communication control unit, switches 
the own communication control unit, which is the standby 
system, to the normal system. 

3 . The field apparatus control system according to 
claim 1, wherein said field bus connected to the field 
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apparatus is duplicated, and each of said communication 
control units further comprises : 

operation request transmission means, when the own 
communication control unit is the normal system, for 
transmitting an operation request to the field apparatus via 
each of the duplicated field buses based on control 
information, said control information being transmitted from 
the main control unit of the own system; 

first judgment means for judging whether or not 
response information corresponding to the operation request 
is transmitted from the field apparatus via one of the 
duplicated field buses; 

means for receiving the transmitted response 
information, when the first judgment means judges that the 
response information is transmitted, so as to transmit the 
received response information to the main control unit of 
the own system; 

second judgment means for judging whether or not 
response information corresponding to the operation request 
is transmitted from the field apparatus to the address via 
the other one of the duplicated field buses when the first 
judgment means judges that the response information is not 
transmitted; 

means for receiving the transmitted response 
information when the second judgment means judges that the 
response information is transmitted so as to transmit the 
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field buses being referred as a normal system field bus and 
other thereof being referred as a standby system field bus; 

duplicated main control units for controlling the 
duplicated field apparatuses; and 

duplicated communication control units for processing 
information communication between the main control units and 
the duplicated field apparatuses via the duplicated field 
buses, respectively, 

wherein one of the duplicated main control units and 
one of the communication control units constitute a normal 
system, and the other of the duplicated main control units 
and other of the communication control units constitute a 
standby system, and the normal system of communication 
control unit is connected via the normal system field bus to 
the normal system field apparatus so that the normal system 
of communication control unit executes information 
communication processing between the main control unit of 
the own system and the normal system field apparatus via the 
normal system field bus, and 

wherein the standby system of communication control 
unit is connected via the standby system field bus to the 
standby system field apparatus so that the standby system of 
communication control unit executes information 
communication processing between the main control unit of 
the own system and the standby system field apparatus via 
the standby system field bus . 
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5 . The field apparatus control system according to 
claim 4 , wherein said normal system of communication control 
unit further comprises: 

operation request transmission means for transmitting 
an operation request to the normal system field apparatus 
via the normal system field bus based on the normal system 
field apparatus control information which is transmitted 
from the main control unit of the own system; 

means for receiving response information corresponding 
to the operation request which transmitted from the normal 
system field apparatus via the normal system field bus so as 
to transmit the received response information to the main 
control unit of the own system; 

failure judgment means for judging whether or not 
failure occurs to the own system; and 

means for stopping operation of the own communication 
control unit when the failure judgment means judges that 
failure occurs to the own system, and 

wherein said standby system of communication control 
unit comprises means for monitoring operation of the other 
communication control unit which is the normal system so as 
to switch the own communication control unit which is the 
standby system to the normal system when detecting the stop 
of the operation of the other communication control unit 
according to the monitored result. 
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6. A field apparatus control system for controlling a 
field apparatus, comprising: 

duplicated first and second field buses connected to 
said field apparatus ; 

a main control unit for controlling said field 
apparatus ; and 

a communication control unit for processing 
information communication between the main control unit and 
the field apparatus via the first and second field buses, 

wherein said communication control unit further 
comprises 

operation request transmission means for transmitting 
an operation request to the field apparatus via the first 
and second field buses based on control information 
transmitted from the main control unit; 

first judgment means for judging whether or not 
response information corresponding to the operation request 
is transmitted from the field apparatus via one of the first 
and second field buses; 

means for receiving the transmitted response 
information when the first judgment means judges that the 
response information is transmitted so as to transmit the 
received response information to the main control unit; 

second judgment means for judging whether or not 
response information corresponding to the operation request 
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is transmitted from the field apparatus via other of the 
first and second field buses when the first judgment means 
judges that the response information is transmitted; 

means for receiving the transmitted response 
information when the second judgment means judges that the 
response information is transmitted so as to transmit the 
received response information to the main control unit; and 

means for transmitting information to indicate the 
generation of failure in the first and second field buses to 
the main control unit when the second judgment means judges 
that the response information is not transmitted. 

7 . The field apparatus control system according to 
claim 1, wherein said field bus is configured by a radio 
system using radio waves in a high frequency band. 

8 . The field apparatus control system according to 
claim 3, wherein said duplicated field buses are configured 
by radio transmissions based on radio waves which have 
different wavelength bands, respectively. 

9 . A storage medium used in a field apparatus control 
system for controlling a field apparatus connected to a 
field bus, said field apparatus control system comprising 
duplicated normal and standby main control units for 
controlling the field apparatus; and duplicated normal and 
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standby computers for processing information communication 
between the normal and standby main control units and the 
field apparatus via the field bus, respectively, said 
storage medium being readable by at least one of the normal 
and standby computers comprising: 

means for causing at least one of the normal and 
standby computers to transmit an operation request to the 
field apparatus based on control information when the own 
computer is the normal computer, said control information 
being transmitted from the normal main control unit; 

means for causing at least one of the normal and 
standby computers to receive response information 
corresponding to the operation request transmitted from the 
field apparatus to an address, said address being allocated 
to the normal and standby computers; 

means for causing at least one of the normal and 
standby computers to transmit the received response 
information to the main control unit of an own system 
corresponding to the at least one of the normal and standby 
computers ; 

means for causing at least one of the normal and 
standby computers to judge whether or not failure occurs to 
the own system; 

means for causing at least one of the normal and 
standby computers to, when the own computer is the normal 
computer and it is judged that failure occurs to the own 
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computer, stop the operation of the own computer; and 

means for causing at least one of the normal and 
standby computers to monitor operation of the normal 
computer when the own computer is the standby computer, and 
when, by the monitored result, detecting the stop of the 
operation of the normal computer, to switch the own computer 
which is the standby computer to the normal computer. 
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ABSTRACT OF THE DISCLOSURE 



In a field apparatus control system, one of duplicated 
main control units and one of communication control units 
constitute a normal system, and the other of the duplicated 
main control units and other of the communication control 
units constitute a standby system. Each of the normal 
system of communication control unit and the standby system 
of communication control unit has a same address on a 
network via the field bus, which is allocated to each of the 
normal and standby systems of communication control systems. 
The information that is output ted to the address from the 
field apparatus via the field bus is transmitted to the 
normal and standby systems of communication control units, 
respectively . 
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